FEDORA-2016-21f0de504c — security update for libXi

libXi-1.7.8-2.fc23

FEDORA-2016-21f0de504c created by whot 3 years ago for Fedora 23

stable

libXi 1.7.8

Fix crash when calling XListInputDevices on devices without classes

Security fix for CVE-2016-7945, CVE-2016-7946

How to install

sudo dnf upgrade --advisory=FEDORA-2016-21f0de504c

This update has been submitted for testing by whot. 3 years ago

This update has obsoleted [libXi-1.7.7-2.fc23](https://bodhi.fedoraproject.org/updates/FEDORA-2016-9c065db2c1), and has inherited its bugs and notes. 3 years ago

This update has been pushed to testing. 3 years ago

filiperosset commented & provided feedback 3 years ago

karma

no regressions noted

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes 3 years ago

This update has been submitted for stable by whot. 3 years ago

This update has been pushed to stable. 3 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

Builds

libXi-1.7.8-2.fc23

Settings

Unstable by Karma

-3

Stable by Karma

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

BZ#1381868 CVE-2016-7945 libXi: Insufficient validation of server responses result in Integer overflows

BZ#1381869 CVE-2016-7946 libXi: Insufficient validation of server responses result in various data mishandlings

BZ#1381870 CVE-2016-7945 CVE-2016-7946 libXi: various flaws [fedora-all]

libXi-1.7.8-2.fc23

How to install

Automated Test Results